Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/91088142-242f-4b8c-b210-bc9d4bb6c52b.roa
File:                     91088142-242f-4b8c-b210-bc9d4bb6c52b.roa (raw, json)
Hash identifier:          yCAszips0opzcr++2FtOIBGnQQOFsrjv0HBO8cAQybo=
Subject key identifier:   3C:95:72:3C:A8:65:CB:80:99:60:BF:F9:25:C8:03:B0:BD:B0:05:83
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7A68296F01F1EF92096BF3022EFD6DE123978265
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/91088142-242f-4b8c-b210-bc9d4bb6c52b.roa
Signing time:             Fri 17 Feb 2023 00:00:00 +0000
ROA not before:           Fri 17 Feb 2023 00:00:00 +0000
ROA not after:            Mon 20 Feb 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:68:29:6f:01:f1:ef:92:09:6b:f3:02:2e:fd:6d:e1:23:97:82:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 17 00:00:00 2023 GMT
            Not After : Feb 20 23:59:59 2023 GMT
        Subject: serialNumber=032a83d46b7c962ae4cf910b31c6545f2c9013618063efec55ede56016e5ede9, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c7:d7:79:ea:35:f9:bc:43:58:1b:e4:7e:f9:
                    24:96:6e:c7:61:8b:f1:f6:d4:da:ab:15:77:0d:2c:
                    b2:1f:c0:fe:88:6f:1b:18:f1:ad:b3:6f:3d:57:3d:
                    5a:50:25:e3:cf:b1:ff:f8:3b:73:52:49:5b:b5:b4:
                    ce:19:73:1f:99:94:8c:ca:b3:f3:34:95:6f:b7:fd:
                    1b:8d:2c:81:6b:78:5d:45:52:ff:1f:ee:65:01:c6:
                    4a:82:29:61:06:76:87:40:96:f9:44:1e:d1:20:3d:
                    9a:8f:09:4a:9f:5c:ed:63:9c:13:bc:04:a6:a3:22:
                    1c:5d:1e:5a:e7:6c:a1:6d:37:29:fd:fa:12:55:4a:
                    3a:7d:28:d2:62:03:e9:ba:42:a8:dc:a5:96:51:11:
                    47:cf:98:41:20:b3:56:fc:11:89:d8:0f:6f:ad:fa:
                    01:97:cc:2f:5e:d5:cd:7e:9c:4a:0e:fd:05:05:75:
                    70:ed:af:62:f8:65:fe:1e:12:9f:54:93:a0:bb:41:
                    75:10:26:5a:00:e3:89:2d:99:0d:77:63:26:e0:c7:
                    0b:ad:24:f4:95:74:8e:06:0e:da:c4:20:8c:64:69:
                    c7:f2:94:ba:ea:02:f8:3c:10:45:11:27:d5:c1:36:
                    68:3b:bb:e6:d1:a9:b2:51:1f:69:ea:2a:cc:70:5d:
                    fc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:95:72:3C:A8:65:CB:80:99:60:BF:F9:25:C8:03:B0:BD:B0:05:83
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/91088142-242f-4b8c-b210-bc9d4bb6c52b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:94:44:9a:84:8e:c8:4d:60:3d:35:06:8e:79:fb:56:5c:19:
         dd:05:da:0f:bd:28:9c:32:8a:40:70:5f:df:ea:22:ab:31:66:
         86:e9:fb:ac:64:12:f1:17:84:06:ad:d1:ce:a7:59:07:6a:64:
         ae:3d:0c:bc:c0:5a:fc:81:0d:cc:76:5d:19:fb:67:aa:ff:b4:
         b5:14:08:e0:23:92:c0:c6:02:88:8f:f6:3c:ca:59:c7:2c:1a:
         7b:bb:55:50:69:35:a4:98:6d:0a:13:fd:45:63:5b:24:f8:9d:
         da:b5:45:fc:22:54:a3:61:4d:d2:0c:56:36:57:61:69:25:5e:
         2c:44:84:08:5a:59:2f:ae:c7:7a:a3:57:9d:b6:6b:67:f5:49:
         14:4a:ec:4e:53:25:d4:18:38:21:2c:f5:82:8a:ae:7d:8a:a1:
         0b:d2:b2:28:2d:fb:f0:6c:da:fe:bf:73:33:26:9e:4b:fe:e7:
         d7:74:68:61:bf:ac:0b:28:85:06:7a:3c:01:a3:ae:67:97:73:
         a5:ad:97:7d:70:ac:82:a5:1f:4b:d8:7c:c1:00:69:5b:4d:1b:
         f0:a8:6d:36:c4:a4:12:6a:03:14:1d:3d:a2:03:b2:c6:ed:00:
         df:d4:2f:7f:21:9b:10:60:61:16:83:74:c7:f0:35:af:ab:77:
         7c:b4:a4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----